HTTP/2 200 date: Mon, 29 Dec 2025 20:43:21 GMT content-type: text/html; charset=utf-8 strict-transport-security: max-age=31536000; includeSubDomains; preload referrer-policy: same-origin x-frame-options: SAMEORIGIN content-security-policy: script-src 'self' vimeo.com https://www.youtube.com https://gist.github.com www.slideshare.net 'unsafe-eval' https://assets.hackmd.io https://www.google.com https://apis.google.com https://docs.google.com https://accounts.google.com https://www.google.com https://apis.google.com https://docs.google.com https://accounts.google.com https://www.dropbox.com https://www.google-analytics.com https://stats.g.doubleclick.net https://secure.quantserve.com https://rules.quantcount.com https://pixel.quantserve.com https://static.hotjar.com https://script.hotjar.com https://www.googletagmanager.com https://cdn.ravenjs.com https://browser.sentry-cdn.com https://js.stripe.com 'nonce-034e49b5-d7fd-492a-a5a8-93448e9d1b9c' 'sha256-EtvSSxRwce5cLeFBZbvZvDrTiRoyoXbWWwvEVciM5Ag=' 'sha256-NZb7w9GYJNUrMEidK01d3/DEtYztrtnXC/dQw7agdY4=' 'sha256-L0TsyAQLAc0koby5DCbFAwFfRs9ZxesA+4xg0QDSrdI=' 'sha256-8HvL1KRq6jEwDkuVgxMDK7Gag1vnT70L0Lfoa1E3YsY=' 'sha256-81acLZNZISnyGYZrSuoYhpzwDTTxi7vC1YM4uNxqWaM=' https://tally.so https://tracks.hackmd.io https://plausible.io; img-src * data: blob:; style-src 'self' 'unsafe-inline' https://assets-cdn.github.com https://github.githubassets.com https://assets.hackmd.io https://www.google.com https://fonts.gstatic.com https://accounts.google.com https://www.google.com https://fonts.gstatic.com https://accounts.google.com https://tracks.hackmd.io; font-src 'self' data: https://public.slidesharecdn.com https://assets.hackmd.io https://script.hotjar.com; object-src *; media-src *; frame-src *; child-src *; connect-src *; base-uri 'none'; form-action 'self' https://www.paypal.com; upgrade-insecure-requests x-xss-protection: 1; mode=block set-cookie: _csrf=11olLReeIIZPN06OlD6da-aB; Path=/; Secure set-cookie: locale=dev; path=/; expires=Tue, 29 Dec 2026 20:43:21 GMT; secure set-cookie: connect.sid=s%3AcG6jDePIUfyKvxDK8M7sIvKH_mxfrrmC.HZB5Sz%2F3bhI6SOZZO9VEw10Y6HYOf7U09wj6vqt7Lwc; Path=/; Expires=Mon, 12 Jan 2026 20:43:21 GMT; HttpOnly; Secure content-language: dev etag: W/"d0fc-RuVDB9hwfj0cfnKRKVzuBBsC/5k" vary: Accept-Encoding content-encoding: gzip